CVE-2000-1254
highcrypto/rsa/rsa_gen.c in OpenSSL before 0.9.6 mishandles C bitwise-shift operations that exceed the size of an expression, which makes it easier for remote atta…
Vendor / product: Openssl — openssl
crypto/rsa/rsa_gen.c in OpenSSL before 0.9.6 mishandles C bitwise-shift operations that exceed the size of an expression, which makes it easier for remote attackers to defeat cryptographic protection mechanisms by leveraging improper RSA key generation on 64-bit HP-UX platforms.
CVSS
7.5
7.5 (CVSS v3.0)
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N Severity source: NVD CVSS v3.0 (nvd@nist.gov)
Timeline (UTC)
Published: 2016-05-05 01:59
Modified: 2026-11-11 23:10
NVD status: Modified
Last synced 3 hours ago
Verified against the source API 2026-11-11 23:12 UTC
Exploitation
Not listed in CISA KEV (as of last catalog sync)
Absence from KEV does not mean a CVE is not exploited. Exploitation status: unknown (no authoritative evidence in our sources).
Affected products
openssl / openssl ≤0.9.5
Weakness classification (CWE)
Source: NVD / CISA. “NVD-CWE-Other” and “NVD-CWE-noinfo” mean NVD could not assign a specific weakness.
Mitigation & advisories
No vendor advisory or patch reference tagged by NVD. Check the references below.
References
- http://marc.info/?l=openssl-users&m=95961024500509 cve@mitre.org
- http://www-01.ibm.com/support/docview.wss?uid=swg21995039 cve@mitre.org
- http://www.openwall.com/lists/oss-security/2016/05/04/17 cve@mitre.org
- http://www.securityfocus.com/bid/90109 cve@mitre.org
- http://www.securitytracker.com/id/1035750 cve@mitre.org
- https://git.openssl.org/?p=openssl.git%3Ba=commit%3Bh=db82b8f9bd432a59aea8e1014694e15fc457... cve@mitre.org
- http://marc.info/?l=openssl-users&m=95961024500509 af854a3a-2127-422b-91ae-364da2661108
- http://www-01.ibm.com/support/docview.wss?uid=swg21995039 af854a3a-2127-422b-91ae-364da2661108
- http://www.openwall.com/lists/oss-security/2016/05/04/17 af854a3a-2127-422b-91ae-364da2661108
- http://www.securityfocus.com/bid/90109 af854a3a-2127-422b-91ae-364da2661108
- http://www.securitytracker.com/id/1035750 af854a3a-2127-422b-91ae-364da2661108
- https://git.openssl.org/?p=openssl.git%3Ba=commit%3Bh=db82b8f9bd432a59aea8e1014694e15fc457... af854a3a-2127-422b-91ae-364da2661108
Data sources
NVD CVE API 2.0 — fetched 2026-11-11 23:12 UTC · record ↗